Three remote code execution bugs in the PrinterLogic platform have been patched. The bugs could allow an attacker to run arbitrary code on any connected endpoint.
The widespread usage of Log4j is adding complexity to organizations attempting to apply patches.
Siemens has issued patches after a set of 13 vulnerabilities was discovered in the Nucleus TCP/IP stack.
A known, critical-severity flaw in ManageEngine ADSelfService Plus is under attack by bad actors who are leveraging it to execute a novel credential-theft tool on victims' networks.
Some proof-of-concept exploits have begun circulating for CVE-2021-40444 and no patch is yet available.